MikroTik

paulct

From Mikrotik:

Hello,

Thank you for the report!

We have managed to reproduce the issue locally in our labs and look forward to fixing it on upcoming RouterOS versions, unfortunately, I cannot provide a release date now.

In the meantime, try disabling the IPv6 L3HW offloading.

paulct

However if it was auto-negotiation, one would think setting to manual 10Gbps on both sides would fix the issue. It does not. Also happens on ALL interfaces at the same time. Something to do with the switchchip hardware or the OS on top of it I think.

paulct

Auto-negoation is also in a failed state on all SFP interfaces, Moving to auto-negotiation off on both sides, does not help.

paulct

Hi all We are running a 2216 as our BGP edge. It was running fine litterally for two weeks. Then on Friday it "hanged" - a reboot resolved the issue. The same issue occured last night. We managed to get onto the router via console and could see all SFP interfaces had no TX traffic and very...

paulct

We are experiencing the same, the 2216 was working fine for two weeks then no SFP TX traffic with high RX overflow packets. Running 7.10.1.
The only interface that does work is ether1, which is not connected to the switch chip.

paulct

I would get a CRS317 for the uplinks, and then 2 x 1072's to split the load for the natting.

paulct

Is this in the works? e.g CCR2216, BGP enabeled router, we need to be able to see the HW offloaded traffic for graphing purposes.

paulct

As it is not a real life test behind a busy network...

paulct

+1 would buy many.

paulct

The new CRS9015 running V7.1 is excellent ;)

paulct

We have a couple of their caches. I think we allocated two /30 public ranges and a /48 IPV6. Established BGP peers with the servers, and hey they work.
Also use LACP between a CRS317 and our edge.

paulct

Waiting on a hap ac2 or ac3 with SFP...

paulct

buffer memory issue? I.e not enough buffer space when going from 10Gbps to 1Gbps and vice versa. Not sure how to get the stats from a Mikrotik on this.

paulct

Only thing I wish both the hAP ac2 and ac3 has was a SFP port

paulct

You will not achieve 1000Mbps over wifi. Maybe +- 500Mbps on 5Ghz with a 3x3 AC card in a laptop. If you want a 1000Mbps - use an ethernet cable.

Between the two - frankly if you do no need an SFP port - I would frankly just go for the hap ac2.

paulct

http://as58280.net/en/articles/RPKI-on-Mikrotik

paulct

The hap ac2 is the successor.

We need a hap ac2 with a SFP port though

paulct

does the rpki in v7 include route origin validation?

I see it does, good news.Time to run a lab soon.

paulct

does the rpki in v7 include route origin validation?

paulct

+1 great

paulct

Thanks for listening Mikrotik.

paulct

bump

paulct

Hi all We use the hap ac2 quite extensively. We received a batch of 50 of them. Over 15 of them are "bricked". i.e cannot reset or netinstall them, usr light is solid and cannot mac telnet or see the router via lan or wifi. We believe a new employee by mistake updated them using the arm-64...

paulct

we have a couple 1072's doing BGP and around 4-5Gbps with no issues. Yes BGP convergence is slow (around 40 peers), but nothing wrong with the 1072.

We will upgrade to the future CCR's and/or CHR soon though as we want to take in a couple full feeds.

paulct

Simple question, why have you not split it over 2 x 1072s?

paulct

Maybe there will be an announcement when the European mum was supposed to commence....

paulct

used of course, new would be +- $4000.

@op
I bought new Juniper EX4600 switches - 24 x 10Gbps SFP+ and 4 x QSFP+ for +- $3800.
They also support expansion models e.g an extra 4 x QSFP+ and/or 8 x 10Gbps SFP_

paulct

There are plenty of Arista and Dell switches on Ebay with more than four QSFP+ ports for below $2k.

paulct

The only settings you can really change is to set auto-negotiation to no and force to 1Gbps on both sides. But doubt thats it.

I have only used the management port ethernet to a Mikrotik - otherwise its normally SFP+ to SFP+ - all work.

paulct

I have no issues from an EX4600 to our Mikrotiks.
Is this ethenet to ethernet?

paulct

CCR - one for BGP
Then another CCR for core - one can then vlan off customers onto another for future expansion.

Rather not have everything running off one device.

paulct

Perhaps try with a revision 2 SFP to ethernet?

paulct

Yes, we are working on BGP at the moment. First beta with enabled BGP is coming soon.

Great!

paulct

That is "DEFCON", and not "DEFCONF"

Defconf = ***booom***

paulct

paulct

OSPF would make it simpler to manage in the long run. But first off replace the DHCP / NAT router with a CCR. Also do you have any monitoring of your links to see where the issue lies? e.g snmp CPU / memory / throughput. You can get a quick instance of observium running to give you a better idea whe...

paulct

Are you running any form of IGP? Or is it all statically routed?

paulct

IPv6 + routing engine =

paulct

Usually one would create a tunnel to a DDOS provider, and advertise your prefixes there.

paulct

testing BT whit 127.0.0.1

CPU works all .... greats..

and CPU FREQUENCY, show the REAL STATE frequency,, that is good

It would be interested if you test against the latest version 6?

paulct

Hi Mikrotik

Any plans for CSFP ports on CRS switches in the future? Would be a great addition.

paulct

Rather get another CCR or two and split your clients up by vlans.

paulct

@Mikrotik is there more info about the GPEN21? i.e is it a media converter with POE or what? Does it have ROS access? Or is it just "dumb".

paulct

There is definitely a need for a hap ac lite or hap ac2 with SFP. An all in one device for active networks that is cheaper than the HAP AC.

paulct

100% agree, a HAP AC2 with SFP, and a hap ac lite with SFP.
The HAP AC is a tad too expensive.

We would buy 100s of them.

paulct

+1

Would be good, no need for a VOIP phone then.

Also a HAP ac lite or hap ac2 with a SFP port - however not as pricey as a Hap AC. nudge nudge...

paulct

With the new 7 beta that is out we know they have improved the process of importing bgp routes. Just a matter of time before this is released into the wild and on e.g Tile.
However I would not run it in production for quite a while yet.

paulct

Without an export of your config no one can really help.

paulct

It depends where this device is on your network. We have no issues with the following setup building ccr1009 (ospf, pppoe server, simple queues etc) + switches >>fibre>> Datacenter Switch CCR core (iBGP, OSPF etc) CCR edge (ebgp, OSPF, simple firewall rules) >>> peering internet

paulct

There are no set release schedules for the next beta releases. We will release beta2 once were done fixing current bugs that were found in beta1 and once we expanded the current feature set (and maybe beta on another platform, who knows!). Thanks, I would presume the beta version of V6 would slow d...

paulct

Out of interest is there an expected release date of new revisions, e.g v7.0beta2 every couple weeks? Or would we only get updates every quarter?

Thanksk

paulct

possibly due to this reason:

viewtopic.php?t=150534

paulct

As login method was changed in v6.43 and old login method support was dropped in 6.45, you cannot use old MAC-Telnet clients anymore.

ok so I would need to also upgrade ROS on the interconnected router I am mac-telneting from?

paulct

Can't login via linux MAC-Telnet 0.4.4. after update to this version. Connecting to.......done Login failed, incorrect username or password ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet. The password is correct. Same issue here. It seems to ...

paulct

*) ethernet - added support for 25Gbps and 40Gbps rates

soon, mmmm

paulct

Usually goes like this

Tower (various P2P and P2MP links) - switch - router (pppoe server / NAT / Queues / OSPF / Maybe some L2) - link back to your network.
You would then have a central radius server somewhere in your network for auth and IPs .

paulct

Main advantage is spreading your risk to have a pppoe server at every pop. Second advantage is that not one router is doing all queues/firewall/natting for all clients.

paulct

Rather test via IPerf, using a powerful PC on either side of the router. You might be maxing out the CPU using btest.
The CCR1009 should be able to push more than 500Mbps.

paulct

How are you testing this limit?

paulct

The destination MAC address of LACP PDUs is 01:80:c2:00:00:02, which is a "link-local" multicast address, so switches that are not totally dumb do not forward such frames. LACP has been designed for interconnection of two adjacent boxes using multiple physical links, not for transiting ea...

paulct

Hi One of our customers has two links, one through us, and one through another provider. We simply pass over some tagged vlans for them, via a CCR and at the data-centre another CCR. They are attempting to create LAG groups on their device to leverage the two diverse trunks provided to them. The Pri...

paulct

Check the latency between the links. TCP throughput it dependent on latency.

paulct

There is an issue I have picked up which I have sent through to support.
However on a CRS317, using bidi Mikrotik models. They only work on ROS 6.41 and lower, any higher version and no SFP model information is displayed and there is no link with either auto or no negotiation.

paulct

I agree, e.g HAPac2 with SFP but not at the price point of the old HAP AC.

paulct

Why are you shifting frequencies? Are they all connected via wireless?

paulct

All I can say is that development of v7 has picked up in the last few months, more than ever. While I can't promise anything stable, it is pretty safe to say, that some kind of public test release (like beta for specific platforms) could be expected this year. The chances of that happening are now ...

paulct

same here, a real issue when you to need to prove something.

paulct

Hap AC2 + an SFP port =

paulct

Was this the big European MUM? Or is that one in April?
There seems to have been no live stream.

paulct

*) ethernet - added support for 25Gbps and 40Gbps rates

Cough, MUM, new hardware?
Those new switches? And hopefully some new powerful routers.

paulct

eBGP on both routers to your provider - you will need separate interfaces/vlans.
Then iBGP between the two routers for redundancy.

paulct

We also use draw.io

paulct

can you explain more ...i did't get you ..what should change

Well are you getting routes in your routing table for the Peering? What routes are you getting for "international"?

paulct

Setup BGP peering with the route servers and collectors at the internet exchange......
Those routes will then be injected into your routing table and everything else will e.g go out your default route for international.

paulct

Thanks to everyone for their input. The issue has been found and fixed, sorry for such a long time needed to fix the issue. It should be released in the next public beta version.

Great news, what was the issue?

paulct

Great news!

paulct

Got out link working on 66ghz at 1892.47m. Getting a mcs of 8 and 2.3Ghz. It can still be aligned quite a bit better - we will try on a less windy day. interface w60g monitor wlan60-1 connected: yes frequency: 66000 remote-address: 30:07:4D:43:06:E5 tx-mcs: 8 tx-phy-rate: 2.3Gbps signal: 50 rssi: -6...

paulct

It is already live? 66ghz, but only via CLI

paulct

Nice idea, but no thanks. You would looks at least 1 - 2u anyway as you need space above and or below the switch - so no real point. A normal 48 port 1u or like NZ_Monkey said that Juniper is very nice. There is a much greater risk one could damage or unseat the cabling.

paulct

Hmmm IPV6 package not enabled on our clients router, also no Nest devices. However setting 5Ghz to wireless N does work. Though not ideal.

paulct

Yup also using the latest beta. On two separate links of +-1800m and 2000m cannot even make a single link. Using 64800 and 66000. You would think after aiming for a while there would at least be a connection - a bad one at least.

paulct

https://download.mikrotik.com/routeros/ ... beta01.npk

paulct

How are you seeing this channel? I have the latest release, and I'm in the US, but I don't see how to enable a channel higher than 64800.

Only on beta versions and only via the CLI currently.

paulct

Well you can run iBGP between the two or just normal OSPF.

E.g /30 between the two, instances using a loopback IP and a default route our for router B.

Router B can then be your PPPoe Server, DHCP, queuing etc...

paulct

By the way, if anyone noticed, CRS332-32S+RM has now became CRS326-24S+2Q+RM

Awsome, I did let them know that a 24 port SFP+ switch is pretty useless without some QSFP+ ports. Well done Mikrotik.

paulct

Yes, we are aware of this peculiarity and we are working also on new routers that have higher power per core, not just many cores.

Good

Looking forward to them.

paulct

Moral of the story... We hope that Mikrotik is going to update the CCR line to support ARM processors. Tilera has had its day. At least we will get an immediate benfit in raw CPU power for the likes of BGP, firewall, routing etc.. I can only then presume that v7 or whatever you want to call it will ...

paulct

Whilst I understand that product recommendations are off topic can anyone help by explaining what the critical factors are when looking for SFPs that are going to be compatible with a new service? Is wavelength a defining factor that should be considered/matched or should anything else be used to g...

paulct

This is why there is no V7. Upload to a current router and fire starts.

lies, it was a CCR1036 capicitor.

Sorry to hear Mikrotik, glad no one was hurt. All the best.

paulct

There's no stacking functionality in RouterOS or SwitchOS, as far as I know.

It has been hinted at with their still to be released 40Gbps switches.

paulct

Until there is version 7, or whatever it is called. Can we get a BGP peer priority? e.g say if you need to upgrade ROS, swap out a CCR, or reboot - each BGP is assigned a priority and receives/sends routes according to that policy in order? e.g: Peer 1 - default route (priority 1) IX route server - ...

paulct

This is pure speculation based on what Mikrotik have done in the past, but my bet is on a split release. RouterOS v7 will be a continuation of RouterOS v6 with a bumped 3.xx Kernel, e.g. 3.7 and support for all current architectures. It will have the new routing engine, but will rely on the same fo...

paulct

What is the issue?

paulct

just use BGP, receive the local/national routes - and then just a default route out for all others, i.e international. If they do BGP for customers....

paulct

Not a switch but.....

https://fccid.io/TV74011GS-5HQ2HD/Exter ... os-3948604

paulct

*) bridge - added per-port based "tag-stacking" feature

Can this also be explained. Similar to selective q-in-q?

paulct

Pretty simple. Mikrotik just needs to stop the speculation. "Yes we are actively working on v7, a RC should be available Q4 in 2018." "The main objectives - new routing engine, new linux kernal etc... future enhancements to be added in further RC versions." "It has been dela...

paulct

I do not think that Cisco and Juniper are too strong for Mikrotik. I think Mikrotik have been having an identity crisis, and have lost focus on what made them successful in the first place. Routing... This is where the crux lies. I for one would pay more for a better product, Mikrotik does not alwa...

paulct

which is not ideal in all cases, unless ALL your switches can do this. e.g Switch A (some other brand or such - managed switch but no q-in-q) - one uplink to switch B (mikrotik) - and then to switch C (Mikrotik) - handover point. So on switch B you wont be able to say c-tag 10-30 goes to s-tag 100 ...

paulct

But my suggestion uses two different ports, on one of them only the c-vlans 10,20,30 are permitted by the vlan-filtering rule, and on the other one only the c-vlans 11,21,31. Ok which is not ideal in all cases, unless ALL your switches can do this. e.g Switch A (some other brand or such - managed s...

paulct

This can be obtained using vlan-filtering on the bridge hosting the c-vlans and two s-vlan interfaces: /interface vlan add interface=ether4 name=s-vlan-100 use-service-tag=yes vlan-id=100 add interface=ether4 name=s-vlan-101 use-service-tag=yes vlan-id=101 /interface bridge add name=bridge-x vlan-f...

paulct

I am treading in waters I have not done before and it is a semi live network, so I need to get my ducks in a row, below is what I need: Cust 1 ---- C-Vlan 10 ----- \ Cust 2 ---- C-Vlan 20 -------\--- CCR1036 -- S-Vlan 50 ---- Co Loc for ISP's / Cust 3 ---- C-Vlan 30 ---- / Customers coming in on th...

paulct

Hence why each router also has a unique admin password, so if the tunnel/radius had to break we can still get into the router/switch. ... but that still leaves you vulnerable to the current problem. only your port filtering saved you, not your advanced password management! Yes and no, having a uniq...

paulct

There has to be a trade-off between a secure access and the risk of unreachable devices when something breaks. With such config the device will be inaccessible when the connection to radius cannot be set up. We use radius for customers, but to use it for management of the device would be too much o...

paulct

From our network each and every router/switch has a unique randomly generated password. Each router/switch connects via an openvpn tunnel to our radius server for login details, i.e each engineer gets their own user/password to login for accountability. Also on our edge we block port 8291, 22, 23 et...

paulct

Great, however not sure why the included QSFP in these models. Compared with other vendors usually 4 x SFP+ is enough. The only usually include QSFP if the ports are all 10Ge or SFP+. Not complaining as such, but a little strange. QSFP+ could be used for future features, like stacking. True (which ...

paulct

CRS354-48G-4S+2Q+ • 48x Gigabit ports • 4x SFP+ for 10Gbit connections • 2x QSFP ports for 40Gbit connections CRS354-48P-4S+2Q+ • 48x Gigabit ports with PoE out • 4x SFP+ for 10Gbit connections • 2x QSFP+ ports for 40Gbit connections Great, however not sure why the included QSFP in these models. Co...

paulct

Yes.
https://www.youtube.com/watch?v=lttApfKouHU

Thanks

paulct

Hi

Is there going to be a live stream? I presume it would be under their youtube page?

paulct

I would hope for 40G ports, at least one. Reason being is that: 1) Switches with 40Gb ports are much cheaper (especially 2nd hand) 2) Optics are MUCH cheaper for 40Gb especially on longer links I have no problem if there are SFP28 ports for 25/50/100 (for future capacity) - but I think SFP+ and 40Gb...

paulct

There is nothing you can really do, 6Mbps between 200 people is crazy. Maybe find out if there are any other fibre / wireless providers in the area that can get you more bandwidth.

paulct

It feels more like a replacement/upgrade on the hap ac lite.

paulct

TILE-Mx100 CPU looks like the logical successor the the current Tile-Gx? => http://www.ezchip.com/files/drim__EZchip_LinleyDataCenterConference_Feb2015_7671.pdf EZchip was bought out by Mellanox, I am not sure if they are developing the Tilera platform anymore. What we need to high clock speed, a r...

paulct

Client router - switch (CRS) - router (CCR)

paulct

Except what nz_monkey wrote ... we are implementing much faster BGP in v7. Not multi-threaded, because of reasons that were outlined, but much faster. So is that confirmation that you are actively working on v7 and it is not just a pipe dream? I presume it would be needed if the next generation of ...

paulct

Looks good, although it is a pity there seems to be no SFP port.
Dual core arm looks good, WIFI looks good, but would be nice if external antennas could be added.

paulct

Testing over 1Gbps is hard - mainly due to the fact that most network cards are 1Gbps. To properly test you will need to powerful PC's on both sides of the link with 10Gbps network tests. Then run IPerf3 with multiple streams. One PC is the server, so you would just run e.g iperf3 -s And on the othe...

paulct

Hi Paulct, I test 802.3ad before but cant get success betwen CCR1072 and CCR1036. Can you share your settings I want to re try 802.3ad again. Thanks. Sure, simple config. I am only posting the config from the one router, as the other is exactly the same. The obliviously a /30 on the bonding interfa...

paulct

Hi. Sory bad english. This day install wap60 link 1.1 km. Distance. Wap60 mount 45 cm parabolic dish antenna. My signal min. 75 maks. 85 but not connected. Status connect and notconnect connect and notconnect. What problem. ? Wap60 software distance limitation or ack timing problem ? The WAP60 is m...

paulct

Just letting everyone know, switching to 802.3ad i.e lacp, solved our issue. We are now getting full speeds to overseas on higher latency paths.
Super happy. And ps - this is between a ccr1016 and a ccr1072 - so Mikrotik to Mikrotik using layer2 + 3 hashing.

paulct

It is very strange, only affecting some forms of traffic. I can only presume due to packets coming over different interfaces and being renumbered or such causing delays and TCP re-transmissions. Which would affect higher latency traffic i.e international. Local traffic there is no issue, probably du...

paulct

You seem to have a ACL configured? Access control list..... Try disable that and see if the issue persists.

paulct

It is very strange, only affecting some forms of traffic. I can only presume due to packets coming over different interfaces and being renumbered or such causing delays and TCP re-transmissions. Which would affect higher latency traffic i.e international. Local traffic there is no issue, probably du...

paulct

Hi We run an ISP, we have a core router with two 1 gig connections passing through to an edge router. From a ccr1036 to a ccr1072. We are using balance-rr for bonding - to get "2gbps" throughput. Strange issue that was brought up by a client getting slow speeds to their sharepoint server o...

paulct

One of my big problems with Mikrotik switches is their power. I would prefer to pay another couple hundred dollars to have dual power supplies that are removable. More of the sites we bring online have dual power feeds and/or do maintenance on one of the feeds monthly. We cannot use Mikrotik in thes...

paulct

Impossible, unless there is 0 noise and you can bond multiple netmetal 5's. Rather look at 80Ghz for 1gbps + at that distance, or if your country allows it 24Ghz.

paulct

It is silly, why would you want to do this? Just use normal SFP's and single mode fibre.

paulct

Have you torched the interface? You sure you do not have an open dns relay?

paulct

Stop questioning

I suppose you can only buy and try it out. The other Mikrotik SFP's work great, though we buy all our SFP's from FS as it is much cheaper in bulk than our local suppliers.

paulct

that is USD 3K device ... too expensive ... I am looking for cheaper one around 1k++ USD and just 4 x SFP+ is enough ... Otherwise I am thiking to use 2x10G setup bonding and create 2 vlans 1 for BGP facing and 1 for Server facing What do you think? Are you doing BGP etc? If so 3k is cheap as chips...

paulct

TBH a lot of products are due a SOC upgrade, CRS1xx, RB2011, hAP AC Lite, hAP AC, cAP, wAP AC.. I agree, Mikrotik need to focus on the antennas to improve RX performance on their AP's. When we test wAP AC vs Cambium e400, the Cambium has much better RF performance due to the better antenna design. ...

paulct

Will be nice to see this in the hap ac lite and hap ac. There is also a gap for a model between those.

paulct

Well done on the quick response.

paulct

Bump, @Mikrotik can you give any details of what is potentially being planned? Are you going to be moving of the Tilera platform? Marvell? Broadcom? 2018 launch? Faster Mhz CPU's?

paulct

No it is not possible. Unless you are in the middle of nowhere and have 0 noise, you could possibly bond some AC links and get more than a few hundred Mbps.

paulct

Is it possible that the closer IX is filtering the longer prefix / aggregating it into their table? Does your network advertise the more specific prefix into the nearby IX? If so, the nearby IX might actually be preferring your network to reach the sub-prefix and thus would not be advertising it to...

paulct

We run eBGP to various IX's locally and internationally. We have got to a point where we need to start using BGP communities. Question: ISP A advertises x.x.x.x/20 at a local exchange and advertises the same /20 as well as a more specific x.x.x.x/22 at an overseas IX. How would one engineer this rou...

paulct

Have a look at https://unimus.net/
No thanks. Only interested in local solutions.
Unimus is not a cloud software, you run it locally on your servers.

Unless you stick it in the cloud

But yes, @op - best solution for an automated backup and change management.

paulct

Have a look at https://unimus.net/

paulct

Why are you running a hotspot on a switch? The switch should have limited firewall rules. All the natting and hotspot functionality should be on a router.

paulct

CRS317-1G-16S+RM currently does not support QinQ VLANs in switch chip (hardware support). You can currently configure it through VLANs: https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN#Q-in-Q 802.1ad is a bridge standard so we must extend our bridge implementation to support it in hardware (tho...

paulct

any idea on the release date?

paulct

+1 - I would presume it supports it??

paulct

there is a CRS328 4C 20S 4S+ comming later.
20 SFP and 4 SFP+ nice hardware for fiber distribution.

Great

paulct

Why would you want to bridge all ports?

paulct

From my understanding: ISP A plugs in their wan router (what ever brand) - we use vlan translation on our switch to give them a c-tag (customer vlan) - then qinq with a s-tag and hand off at the interconnection point as either both s-tag and c-tag or strip the s-tag and just hand over the c-tag. I p...

paulct

Hi all Do any of you operate an open access fibre network. We run an active fibre network i.e not PON. We ideally do not want to install a device at the customer end like on a PON network e.g a ONT (that I presume adds the vlan tags for the customer side and rate limits the acount). e.g ISP B and IS...

paulct

Any suppliers have stock yet?

paulct

+1 maybe using the new marvel chipsets in the upcoming SFP + CRS version it can support it.

paulct

Hi We are about to establish peering at 3 European internet exchanges. We currently receive routes on our CCR1072 for our local routes +-100k and a default out for international. These European exchanges send out +250k each for two and +-700k for the other. Other than the long +-5min wait for the pr...

paulct

The last line is very important, if Mikrotik users are not actively using IPv6 - then there is no great push/need from Mikrotik regarding the points above. It is almost like IPv6 is in beta - try it out - but don't expect it to work well.

paulct

They have a SFP+ switch coming out later this year. For us we have been using the edge-core 24 x SFP + 2 x SFP+ switches for around $1100. Another 2 x SFP+ can be added with a card. I have been begging for more layer2/layer3 switches from Mikrotik, especially with SFP or SFP+ ports, and ethernet 48 ...

paulct

Yup your ISP will need to filter/block further upstream in the network. Unless your router has obvious open services like DNS.

paulct

Not a bad idea.

Otherwise would really like something like this https://www.servethehome.com/qct-quanta ... be-switch/
A 24 port half width, another one can be mounted to make a 48 port at any time.

paulct

You can use vlans, with ecmp and load balance across them.

paulct

We have decided on a /48 per customer regardless if its a big corporate or a small home user. It just makes things more simple. e.g if one of your clients wants to subnet then a /56 is the minimum. You could do - /56 for home users and /48 for corporate's - but why? e.g a /32 allocation is 65536 /48...

paulct

sorry to hijack this thread, but does the QOS shaper have any effect on the CPU? much like a queue?

paulct

If you are in the middle of nowhere with no interference you "may" get those speeds using airfibre. I doubt you would get 400/400 though, maybe like 350/100 or so. e.g in my country we cannot use 24Ghz either, however we can use 80Ghz which works really well at those distances using only 1...

paulct

You would need to use another band, such as 24Ghz, 17Ghz, 80Ghz etc to get those sorts of speeds.

paulct

Can't you just connect two 24 port switches? Still more affordable

A 48 port switch only takes up 1u, compared to 2u with 2 x 24 port switches. Which is important for switch installs in risers or tight spaces or multiple switches in a cabinet. The price is not always everything.

paulct

Any reason why there is no 48 port switches? We have to use other manufacturers for this...just seems strange.

paulct

Post the Mikrotik model number (config differs from switch to router). Then post your config.

paulct

Anyway solved the issue. The phones are Yealinks and check lldp before dhcp. On one of my fibre switches lldp was enabled by default....sigh.

Seems to be fixed.

Sent from my D6603 using Tapatalk

paulct

Hi I have quite a strange issue. Basically the phones are manually configured with a vlan (600), and set to dhcp. Some work and some others do not, e.g I plug a phone directly into a switch it gets and IP, replug it in again - does not get an IP. These phones then register to the onsite PBX (which i...

paulct

Hi We use Observium to monitor snmp and perform graphing on our links as well as the dude. However the graphs do not pick up quick spikes, i.e hitting a certain limit for 1 second or two. So I implemented traffic monitor to send an email when e.g received traffic on a certain link went above 75%. Th...

paulct

Yes, it was on MUM. On US MUM in 2014

https://mum.mikrotik.com//presentations/US14/ccrros.pdf

Too many bud lights that day....

paulct

It's typically due to better clock speeds on a single core for a VM since the process is still confined to a single core. The Tilera family of processors is optimized to move packets. BGP has a heavy computational load with large route tables and so Intel x86 chipsets are able the chew through the ...

paulct

I would like to see more of a focus on the layer2 distribution side so it ties in with these new proposed routers. Otherwise we would need to pick other brands for L2 which we have been doing especially for SFP+ port density and POE. Stacking on the switches as well as the routers. More IPv6 support...

paulct

Thank you all for your suggestions and comments... I feel incredibly stupid...... after staring at it and doing the packet capture.... I realized that I was using my-own IP address (as assigned by the Peering Exchange) for the other peers remote address.

Peering with yourself

paulct

You would need to wait for the SFP+ crs that Mikrotik has announced at the latest MUM. However it will only be released later this year, and I doubt it would be <$500, maybe a bit more. You would also ideally want a switch with dual PSU's as well - which the new Mikrotik has. If you are in a rush ge...

paulct

speedtest.net results are all over the place, it all depends on latency, server type, config, bandwidth etc.

A proper way to do a speedtest is to do an iperf to the location you want to get to.

paulct

To influence incoming traffic is not easy. Prepending will not help if e.g
provider x is a transit customer of ISP x, then that ISP will always prefer those routes than routes learnt from peering partners.

paulct

Version 6.39rc62 has been released.
*) wireless - added PEAP authentication support for wireless station mode;

Wow, finally

nice

paulct

That sucks, vote with your wallet. As a standard, even for home users we dish out a /48 - just keeps everything simple.

paulct

Its a switch and not a router.
1) Buy a router e.g Rb3011 or ccr1009
2) Possibly get slightly better performance using fastrack on your switch.

Go for option 1 though

paulct

Iperf on two well specced machines on either side of each router.

paulct

For me I do not really see the point in 2.5 and 5. Either 1Gbps or 10Gbps etc. Otherwise interoperability between vendors and models becomes hard.

paulct

More than likely an issue with the POE's that supply the airfibres or the network cabling. One ethernet speed on the CRS would not affect the other. Unless the master port goes from 1Gbs to 100Mbps then all would be affected - as that is the uplink port.

paulct

Separate peers as you may want to apply different filters.

paulct

Why would you want to? What is your use case?

paulct

http://www.iparchitechs.com/

paulct

I only have ~20 Mikrotik in my production network. With this small amount (and since they are all different) I still do any configuration by hand, but for updates and monitoring I use 2 different things. 1. I use Cacti's Mikrotik plugin to keep track of firmware and software versions. Mikrotik.png ...

paulct

There are many ways to do this. But generally from my opinion try not to de-aggregate.

paulct

Subnet your network + OSPF =

paulct

I think the client should stay away from you.

paulct

@Mikrotik any plans for a HAP AC lite with an SFP port? Something a bit cheaper than the normal HAP AC?
The Hex POE is awesome, except no wireless (if you take the POE capability away and add an SFP) - and the HAP AC is a bit pricey for a basic fibre install to a normal home.

paulct

No real point unless you need 10Gbps interconnects between your router and the switches. The other reason might be that you do not want to loose an ethernet port on the switch by having to uplink via ethernet, or that the cable run is very long.

But nothing wrong running normal cat6.

paulct

Ok So On the CCR, you would create a bridge and add e.g ether1,2,3 to the bridge. These are the ethernets connecting to the crs switches. I would advise then creating a management IP range. e.g 10.0.2.0/29 to manage the switches. e.g 10.0.2.1 on the CCR and 10.0.2.2 etc on the switches. You can run ...

paulct

Sounds like you are just needing a gigabit "dumb" switch. So either get the crs 125 or the crs 226 (if you need SFP+) - then set all ethernet ports as slaves to the master port, i.e the port that connects to the CCR. Then e.g add your /24 on the uplink port on the ccr, and you can take an ...

paulct

/routing bgp instance set default cpu=18

paulct

The CCS looks more like a "smart" switch, i.e to compete with the lower end other brands "managed" switches - yet the Mikrotik has more features. Interesting that they are continuing with SWOS though.

paulct

Why do you need layer 3 behind the Cisco?

paulct

Mine is on 6.30.1 - holding thumbs

paulct

Just a bump..... leap second on the 31st of December 2016. Make sure your CCR's are upgraded before then.

paulct

I have some Hex POE's powering 802.3at devices fine. Maybe the cisco required 2A, the Mikrotik can only do max 1A per port.

paulct

- new CRS317 with 16 x SFP+ ports, coming Q2/17 This completes CRS family :D I can see this being used in my core networks and data centres. If you can get over 100GB total throughput this could be a amazing price. Anyone seen a price for this? +1 Sigh, just bought 6 brand new (no warranty) Dell 80...

paulct

ps - glad my post worked

http://forum.mikrotik.com/viewtopic.php?t=111938
Just need a 48 port ethernet crs, and maybe some 802.af/at CRS's in the future.

paulct

Fantastic news about the CRS SFP+ - any news about power for this device? Any chance of having dual power supplies?
Also great news about the CCR1009

Well done
As you can see, there are two power LEDs

Perfect, had to zoom in

GREAT!!

paulct

Fantastic news about the CRS SFP+ - any news about power for this device? Any chance of having dual power supplies?
Also great news about the CCR1009

Well done

paulct

I am surprised they have not released an update of the 1036 with dual psu's a year or so back. Should be a minor revision.

Search found 337 matches